From: nekral-guest Date: Mon, 26 Nov 2007 23:27:56 +0000 (+0000) Subject: * man/chfn.1.xml: Uses CHFN_AUTH, CHFN_RESTRICT, LOGIN_STRING. X-Git-Tag: 4.1.0~12 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=0f7f0ea4671b822f2a41f74beb402de015c0354b;p=shadow * man/chfn.1.xml: Uses CHFN_AUTH, CHFN_RESTRICT, LOGIN_STRING. * man/chgpasswd.8.xml: Uses ENCRYPT_METHOD, MAX_MEMBERS_PER_GROUP, MD5_CRYPT_ENAB, SHA_CRYPT_MIN_ROUNDS (SHA_CRYPT_MAX_ROUNDS). * man/chpasswd.8.xml: Switch to using entities for ENCRYPT_METHOD, MD5_CRYPT_ENAB, SHA_CRYPT_MIN_ROUNDS (SHA_CRYPT_MAX_ROUNDS). * man/chsh.1.xml: Uses CHSH_AUTH, LOGIN_STRING. * man/expiry.1.xml: Does not use any login.defs parameter. * man/gpasswd.1.xml: Uses ENCRYPT_METHOD, MAX_MEMBERS_PER_GROUP, MD5_CRYPT_ENAB, SHA_CRYPT_MIN_ROUNDS. * man/login.defs.5.xml: Added CHSH_AUTH. * man/login.defs.5.xml: Cross reference -> cross references. * man/login.defs.5.xml: chfn only uses CHFN_AUTH when no_pam. * man/login.defs.5.xml: chsh uses CHSH_AUTH, not CHFN_AUTH. * man/login.defs.d/CHSH_AUTH.xml: Added. * man/login.defs.5.xml: chsh uses parameters only when no_pam. * man/login.defs.5.xml: expiry does not use CONSOLE_GROUPS, even if linked in the binary. * man/newusers.8.xml: Uses ENCRYPT_METHOD, MAX_MEMBERS_PER_GROUP, MD5_CRYPT_ENAB, PASS_MAX_DAYS, PASS_MIN_DAYS, PASS_WARN_AGE, SHA_CRYPT_MIN_ROUNDS, UMASK. --- diff --git a/ChangeLog b/ChangeLog index 43954e5b..a1408655 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,26 @@ +2007-11-27 Nicolas François + + * man/chfn.1.xml: Uses CHFN_AUTH, CHFN_RESTRICT, LOGIN_STRING. + * man/chgpasswd.8.xml: Uses ENCRYPT_METHOD, MAX_MEMBERS_PER_GROUP, + MD5_CRYPT_ENAB, SHA_CRYPT_MIN_ROUNDS (SHA_CRYPT_MAX_ROUNDS). + * man/chpasswd.8.xml: Switch to using entities for ENCRYPT_METHOD, + MD5_CRYPT_ENAB, SHA_CRYPT_MIN_ROUNDS (SHA_CRYPT_MAX_ROUNDS). + * man/chsh.1.xml: Uses CHSH_AUTH, LOGIN_STRING. + * man/expiry.1.xml: Does not use any login.defs parameter. + * man/gpasswd.1.xml: Uses ENCRYPT_METHOD, MAX_MEMBERS_PER_GROUP, + MD5_CRYPT_ENAB, SHA_CRYPT_MIN_ROUNDS. + * man/login.defs.5.xml: Added CHSH_AUTH. + * man/login.defs.5.xml: Cross reference -> cross references. + * man/login.defs.5.xml: chfn only uses CHFN_AUTH when no_pam. + * man/login.defs.5.xml: chsh uses CHSH_AUTH, not CHFN_AUTH. + * man/login.defs.d/CHSH_AUTH.xml: Added. + * man/login.defs.5.xml: chsh uses parameters only when no_pam. + * man/login.defs.5.xml: expiry does not use CONSOLE_GROUPS, even + if linked in the binary. + * man/newusers.8.xml: Uses ENCRYPT_METHOD, MAX_MEMBERS_PER_GROUP, + MD5_CRYPT_ENAB, PASS_MAX_DAYS, PASS_MIN_DAYS, PASS_WARN_AGE, + SHA_CRYPT_MIN_ROUNDS, UMASK. + 2007-11-26 Nicolas François * man/generate_translations.mak, man/po/Makefile.in.in: Add diff --git a/man/chfn.1.xml b/man/chfn.1.xml index e14f85d0..cd9fd39a 100644 --- a/man/chfn.1.xml +++ b/man/chfn.1.xml @@ -1,4 +1,11 @@ + + + +]> + @@ -56,6 +63,20 @@ + + CONFIGURATION + + The following configuration variables in + /etc/login.defs change the behavior of this + tool: + + + &CHFN_AUTH; + &CHFN_RESTRICT; + &LOGIN_STRING; + + + FILES diff --git a/man/chgpasswd.8.xml b/man/chgpasswd.8.xml index baa76739..8017705d 100644 --- a/man/chgpasswd.8.xml +++ b/man/chgpasswd.8.xml @@ -1,4 +1,12 @@ + + + + +]> + @@ -121,6 +129,21 @@ + + CONFIGURATION + + The following configuration variables in + /etc/login.defs change the behavior of this + tool: + + + &ENCRYPT_METHOD; + &MAX_MEMBERS_PER_GROUP; + &MD5_CRYPT_ENAB; + &SHA_CRYPT_MIN_ROUNDS; + + + FILES diff --git a/man/chpasswd.8.xml b/man/chpasswd.8.xml index 85b4ffa4..49311077 100644 --- a/man/chpasswd.8.xml +++ b/man/chpasswd.8.xml @@ -1,4 +1,11 @@ + + + +]> + @@ -135,112 +142,10 @@ /etc/login.defs change the behavior of this tool: - - - (boolean) - - - Indicate if passwords must be encrypted using the MD5-based - algorithm. If set to yes, new - passwords will be encrypted - using the MD5-based algorithm compatible with the one used by - recent releases of FreeBSD. It supports passwords of - unlimited length and longer salt strings. Set to - no if you - need to copy encrypted passwords to other systems which don't - understand the new algorithm. Default is - no. - - - This variable is superceded by the - variable or by any command - line option. - - - This variable is deprecated. You should use - . - - - Note: if you use PAM, it is recommended to set this variable - consistently with the PAM modules configuration. - - - - - (string) - - - This defines the system default encryption algorithm for - encrypting passwords (if no algorithm are specified on the - command line). - - - It can take one of these values: - - - DES (default) - - - MD5 - - - SHA256 - - - SHA512 - - - - - Note: this parameter overrides the - variable. - - - Note: if you use PAM, it is recommended to set this variable - consistently with the PAM modules configuration. - - - - - (number) - (number) - - - When is set to - SHA256 or - SHA512, this defines the number of - SHA rounds used by the encryption algorithm by default (when - the number of rounds is not specified on the command line). - - - With a lot of rounds, it is more difficult to brute forcing - the password. But note also that more CPU resources will be - needed to authenticate users. - - - If not specified, the libc will choose the default number of - rounds (5000). - - - The values must be inside the 1000-999999999 range. - - - If only one of the or - values is set, then this - value will be used. - - - If > - , the highest value will - be used. - - - + &ENCRYPT_METHOD; + &MD5_CRYPT_ENAB; + &SHA_CRYPT_MIN_ROUNDS; diff --git a/man/chsh.1.xml b/man/chsh.1.xml index c3edca81..e477917d 100644 --- a/man/chsh.1.xml +++ b/man/chsh.1.xml @@ -1,4 +1,10 @@ + + +]> + @@ -81,6 +87,19 @@ + + CONFIGURATION + + The following configuration variables in + /etc/login.defs change the behavior of this + tool: + + + &CHSH_AUTH; + &LOGIN_STRING; + + + FILES diff --git a/man/expiry.1.xml b/man/expiry.1.xml index 397419f9..240f1383 100644 --- a/man/expiry.1.xml +++ b/man/expiry.1.xml @@ -1,4 +1,10 @@ + + +]> + diff --git a/man/gpasswd.1.xml b/man/gpasswd.1.xml index df6422ea..b57312e5 100644 --- a/man/gpasswd.1.xml +++ b/man/gpasswd.1.xml @@ -1,4 +1,12 @@ + + + + +]> + @@ -174,6 +182,21 @@ + + CONFIGURATION + + The following configuration variables in + /etc/login.defs change the behavior of this + tool: + + + &ENCRYPT_METHOD; + &MAX_MEMBERS_PER_GROUP; + &MD5_CRYPT_ENAB; + &SHA_CRYPT_MIN_ROUNDS; + + + FILES diff --git a/man/login.defs.5.xml b/man/login.defs.5.xml index 1dad9a92..6bed4780 100644 --- a/man/login.defs.5.xml +++ b/man/login.defs.5.xml @@ -3,6 +3,7 @@ "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [ + @@ -67,6 +68,7 @@ &CHFN_AUTH; &CHFN_RESTRICT; + &CHSH_AUTH; &ENCRYPT_METHOD; &GID_MAX; &LOGIN_STRING; @@ -91,10 +93,10 @@ - - CROSS REFERENCE + + CROSS REFERENCES - The following cross reference shows which programs in the shadow + The following cross references show which programs in the shadow password suite use which parameters. @@ -104,7 +106,8 @@ chfn - CHFN_AUTH CHFN_RESTRICT + CHFN_AUTH + CHFN_RESTRICT LOGIN_STRING @@ -127,21 +130,15 @@ - + chsh - CHFN_AUTH - LOGIN_STRING + CHSH_AUTH LOGIN_STRING - - expiry - - CONSOLE_GROUPS - - + gpasswd diff --git a/man/login.defs.d/CHFN_AUTH.xml b/man/login.defs.d/CHFN_AUTH.xml index e65c04c5..e04c1b98 100644 --- a/man/login.defs.d/CHFN_AUTH.xml +++ b/man/login.defs.d/CHFN_AUTH.xml @@ -1,10 +1,10 @@ - + (boolean) - If yes, the chfn and - chsh programs will require authentication before - making any changes, unless run by the superuser. + If yes, the chfn + program will require authentication before making any changes, + unless run by the superuser. diff --git a/man/login.defs.d/CHSH_AUTH.xml b/man/login.defs.d/CHSH_AUTH.xml new file mode 100644 index 00000000..90804460 --- /dev/null +++ b/man/login.defs.d/CHSH_AUTH.xml @@ -0,0 +1,10 @@ + + (boolean) + + + If yes, the chsh + program will require authentication before making any changes, + unless run by the superuser. + + + diff --git a/man/newusers.8.xml b/man/newusers.8.xml index 8039e083..e609e443 100644 --- a/man/newusers.8.xml +++ b/man/newusers.8.xml @@ -1,4 +1,16 @@ + + + + + + + + +]> + @@ -92,6 +104,25 @@ + + CONFIGURATION + + The following configuration variables in + /etc/login.defs change the behavior of this + tool: + + + &ENCRYPT_METHOD; + &MAX_MEMBERS_PER_GROUP; + &MD5_CRYPT_ENAB; + &PASS_MAX_DAYS; + &PASS_MIN_DAYS; + &PASS_WARN_AGE; + &SHA_CRYPT_MIN_ROUNDS; + &UMASK; + + + FILES